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The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 

All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1 .313 and MPEP 1308. 

1 . ^ This communication is responsive to 03/22/04 . 

2. ^ The allowed claim(s) is/are 1-29 , 

3. ^ The drawings filed on 01 April 2003 are accepted by the Examiner. 

4. □Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119{a)-(d)or (f). 

a) □ All b) □ Some* c) □ None of the: 

1 . □ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 



3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 
International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

5. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

6. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1 ) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mail Date . 

Identifying indicia such as the application number (see 37 CFR 1.84(c)) should be written on the drawings In the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 

7. □ DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be subnnitted. Note the 

attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL. 
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1 . □ Notice of References Cited (PTO-892) ' 5. □ Notice of Informal Patent Application (PTO-1 52) 

2. □ Notice of Draftperson's Patent Drawing Review (PTO-948) 6. □ Interview Summary (PTO-41 3). 

Paper No./Mail Date , . 

3. □ Information Disclosure Statements (PTO-1 449 or PTO/SB/08), 7. □ Examiner's' Amendment/Comment 

Paper NoVMail Date 

4. □ Examiner's Comment Regarding Requirement for Deposit 8. S Examiner's Statement of Reasons for Allowance 

of Biological Material 9. □ Other . 
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Allowance 



I. 



Claims 1-29 will be allowed. 



2. 



The following is an examiner's statement of reasons for allowance. 



The prior art references most closely resembling the applicants claimed invention are Flint et al 



First Flint teaches a graphical user interface for conveniently defining access control rules for a 
firewall. Figs. 4 and 5 of Flint each illustrate an access control rule. In terminology of Flint, 
"every access rule must consist of two specific nodes. The first, services node 60, decides which 
service(s) the rule will control. The second From/To node 62 determines the source region and 
destination region of the cormection." Thus the term "nodes" in Flint refers to nodes in a flow 
chart, as apposed to nodes in a network. Whereas Flint failed to disclose the claimed limitations 
require generating a gateway-zone graph that models said network based on said packet filtering 
configuration file. The claimed limitations further requires that the gateway-zone graph has "at 
least one gateway node corresponding to said at least one gateway and at least two zone nodes". 
These limitations are incorporated into all of the independent claims (claims 1, 9, 



(U.S. 6,453,419) and Reid (U.S. 6,182,226). 



12,19,27,28,29). 



Second Reid teaches a method for analyzing at least one gateway in a network. The graphical 
representation is created by a user to define the access control rules for a given firewall. The 
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graphical representation is then used to generate the access control commands which will be 
implemented by firewall. Reid failed to disclose the claimed limitations require generating a 
gateway-zone graph that models said network based on said packet filtering configuration file. 
The claimed limitations fiirther requires that the gateway-zone graph has "at least one gateway 
node corresponding to said at least one gateway and at least two zone nodes". These limitations 
are incorporated into all of the independent claims (claims 1, 9, 12,19,27,28,29). 

In summary, the Examiner submits that there is no motivation to combine the aforementioned 
references; therefore, claims 1-66 have been deemed allowable over the prior art. 
Any comments considered necessary by applicant must be submitted no later than the payment 
of the issue fee and, to avoid processing delays, should preferably accompany the issue fee. Such 
submissions should be clearly labeled "Comments on Statement of Reasons for Allowance". 



SUPERViSDcT/ 




